Null Pointer Dereference Vulnerability in Linux Kernel Media Component by Vendor

CVE-2023-54314

What is CVE-2023-54314?

A vulnerability in the Linux kernel's media subsystem allows a user-controlled variable to bypass checks, potentially leading to a null pointer dereference in the af9005_i2c_xfer function. When the user's message buffer is null and the length is zero, improper validation can lead to a system crash. The fix involves implementing additional checks to ensure that the length is valid before accessing the buffer, enhancing stability and security.

References